2024 CVE Vulnerabilities
39,350 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-32448 | MEDIUM | 4.3 | 0.2% | Apr 15, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in VideoYield.Com Ads.Txt Admin.This issue affects Ads.Txt Admin: from n... |
| CVE-2024-32447 | MEDIUM | 4.3 | 0.2% | Apr 15, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in AWP Classifieds Team AWP Classifieds.This issue affects AWP Classifie... |
| CVE-2024-32446 | MEDIUM | 5.4 | 0.2% | Apr 15, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in WP Swings Wallet System for WooCommerce.This issue affects Wallet Sys... |
| CVE-2024-32082 | MEDIUM | 6.1 | 0.2% | Apr 15, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Kamlesh Parmar Sync Post With Other Site sync-post-with-other-site al... |
| CVE-2024-32454 | MEDIUM | 4.4 | 0.3% | Apr 15, 2024 | Server-Side Request Forgery (SSRF) vulnerability in Wappointment Appointment Bookings for Zoom GoogleMeet and more – Wap... |
| CVE-2024-32453 | MEDIUM | 4.8 | 0.3% | Apr 15, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POEditor allows St... |
| CVE-2024-32429 | MEDIUM | 4.8 | 0.3% | Apr 15, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPChill Remove Foo... |
| CVE-2024-32428 | MEDIUM | 4.8 | 0.3% | Apr 15, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Moss Web Works MWW... |
| CVE-2024-32149 | MEDIUM | 6.1 | 0.4% | Apr 15, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BlueGlass Jobs for... |
| CVE-2024-32147 | MEDIUM | 5.4 | 0.3% | Apr 15, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Form Plugin Team -... |
| CVE-2024-32145 | MEDIUM | 6.1 | 0.4% | Apr 15, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PineWise WP Google... |
| CVE-2024-32140 | MEDIUM | 5.4 | 0.3% | Apr 15, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in libsyn Libsyn Publ... |
| CVE-2024-32138 | MEDIUM | 6.1 | 0.4% | Apr 15, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in KaizenCoders Short... |
| CVE-2024-32133 | MEDIUM | 6.1 | 0.4% | Apr 15, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michael Schuppenie... |
| CVE-2024-32079 | MEDIUM | 6.5 | 0.3% | Apr 15, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michael Dempfle Ad... |
| CVE-2024-32489 | MEDIUM | 6.1 | 0.6% | Apr 15, 2024 | TCPDF before 6.7.4 mishandles calls that use HTML syntax. |
| CVE-2024-2858 | MEDIUM | 4.8 | 0.2% | Apr 15, 2024 | The Simple Buttons Creator WordPress plugin through 1.04 does not have CSRF checks in some places, which could allow att... |
| CVE-2024-2857 | MEDIUM | 6.1 | 0.2% | Apr 15, 2024 | The Simple Buttons Creator WordPress plugin through 1.04 does not have any authorisation as well as CSRF in its add butt... |
| CVE-2024-2836 | MEDIUM | 4.8 | 0.5% | Apr 15, 2024 | The Social Share, Social Login and Social Comments Plugin WordPress plugin before 7.13.64 does not sanitise and escape ... |
| CVE-2024-1849 | MEDIUM | 5.4 | 0.5% | Apr 15, 2024 | The WP Customer Reviews WordPress plugin before 3.7.1 does not validate a parameter allowing contributor and above users... |
| CVE-2024-1846 | MEDIUM | 5.4 | 0.5% | Apr 15, 2024 | The Responsive Tabs WordPress plugin before 4.0.7 does not validate and escape some of its shortcode attributes before o... |
| CVE-2024-1754 | MEDIUM | 4.7 | 0.5% | Apr 15, 2024 | The NPS computy WordPress plugin through 2.7.5 does not sanitise and escape some of its settings, which could allow high... |
| CVE-2024-1746 | MEDIUM | 5.4 | 0.4% | Apr 15, 2024 | The Testimonial Slider WordPress plugin before 2.3.8 does not sanitise and escape some of its settings, which could allo... |
| CVE-2024-1712 | MEDIUM | 4.7 | 0.5% | Apr 15, 2024 | The Carousel Slider WordPress plugin before 2.2.7 does not sanitise and escape some of its settings, which could allow h... |
| CVE-2024-1660 | MEDIUM | 4.8 | 0.4% | Apr 15, 2024 | The Top Bar WordPress plugin before 3.0.5 does not sanitise and escape some of its settings, which could allow high priv... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now